From 88eaffe4c71aa413ec5ea0ab0253898232ce8799 Mon Sep 17 00:00:00 2001
From: James H Ball <james@ball.sh>
Date: Tue, 31 Dec 2024 20:56:41 +0000
Subject: [PATCH] Change notarisation

---
 .github/workflows/build.yaml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 0339058..fa0fbe7 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -86,7 +86,21 @@ jobs:
         run: productsign -s "${{ secrets.APPLE_DEVELOPER_ID_INSTALLER }}" "${{ github.workspace }}/packaging/build/osci-render.pkg" "${{ github.workspace }}/bin/osci-render.pkg"
     
       - name: Notarize installer
-        run: xcrun altool --notarize-app -f "${{ github.workspace }}/bin/osci-render.pkg" --primary-bundle-id com.osci-render.pkg --username "${{ secrets.APPLE_ID }}" --password "${{ secrets.APPLE_NOTARIZATION_PASSWORD }}"
+        uses: lando/notarize-action@v2
+        with:
+          product-path: ${{ github.workspace }}/packaging/build/osci-render.pkg
+          appstore-connect-username: ${{ secrets.APPLE_ID }}
+          appstore-connect-password: ${{ secrets.APPLE_NOTARIZATION_PASSWORD }}
+          appstore-connect-team-id: ${{ secrets.APPLE_TEAM_ID }}
+          primary-bundle-id: com.osci-render.pkg
+          tool: notarytool
+          verbose: true
+      
+      - name: Staple installer
+        run: xcrun stapler staple "${{ github.workspace }}/bin/osci-render.pkg"
+      
+      - name: Check installer
+        run: spctl -a -vvv -t install "${{ github.workspace }}/bin/osci-render.pkg"
 
       - name: Upload Artifact
         uses: actions/upload-artifact@v3